Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
File: fEzLocBe-GYMTYmHl0qtA4vCtDA.mft (raw, json)
Hash identifier: CZLkcaXEy4s4kGbo0FsuMZ7XjAtdgqspBWOHWJpWlp8=
Subject key identifier: DD:2E:9D:CF:73:CF:C5:49:82:A2:C9:37:A1:F4:CF:1B:C5:C4:30:B6
Authority key identifier: 7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
Certificate issuer: /CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Certificate serial: 01A0C858E04BD1919CF4ED3E85B6F650D10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:02 +0000
Manifest this update: Tue 22 Sep 2026 09:01:02 +0000
Manifest next update: Wed 23 Sep 2026 09:01:02 +0000
Files and hashes: 1: fEzLocBe-GYMTYmHl0qtA4vCtDA.crl (hash: ubapVqFm7SIRoNCoUVNtctlTosQRrdRHXLvWtMztUtk=)
2: sXywAJPQehkX1g8ECCZJdITzLYQ.roa (hash: hR+8uJ6ekanBnzUMm4s8hR/ynV+UmDevvGRnAGbC8cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:e0:4b:d1:91:9c:f4:ed:3e:85:b6:f6:50:d1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Validity
Not Before: Sep 22 09:01:02 2026 GMT
Not After : Sep 23 09:01:02 2026 GMT
Subject: CN=dd2e9dcf73cfc54982a2c937a1f4cf1bc5c430b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:47:51:f0:27:ef:c2:d4:9a:7f:cc:57:08:
72:41:39:be:fd:74:36:c9:a4:35:71:42:7d:5d:30:
c7:cf:6e:b0:e5:08:40:14:68:4d:2f:56:6d:0b:a7:
0e:6a:1b:b4:6c:2f:31:b8:cf:15:bc:40:a1:7d:0a:
04:75:c9:c6:3e:37:30:31:ce:84:18:cd:fb:c9:d8:
85:8d:56:39:f9:53:f3:94:94:21:fa:1c:0c:d4:a3:
d5:37:29:94:4c:5b:37:80:55:02:61:28:9c:39:7b:
3f:b2:f1:26:a5:eb:7d:d2:72:0f:5c:7e:2b:f5:d7:
b0:f9:d0:45:d2:96:c3:6e:b3:86:7f:e3:4a:0e:70:
86:f6:86:28:f7:ae:b7:9a:37:32:a2:7c:25:74:97:
ba:f3:d0:23:9e:60:b6:c1:72:18:b9:8a:c7:4d:31:
2f:aa:84:a8:85:dd:a7:c7:db:a3:3a:75:1d:b0:77:
7f:7a:cf:7d:6b:77:f9:e3:73:74:6f:1e:fe:39:99:
c6:cb:b8:a3:b8:35:56:3a:c5:2f:de:cd:aa:37:c8:
26:00:da:64:2d:cf:a5:9a:83:b3:52:6c:f6:37:e7:
f5:10:93:50:b0:e7:75:bc:77:d4:1e:1c:af:f8:41:
6b:3a:01:02:54:9f:08:f8:18:44:0f:4e:46:1f:59:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:9D:CF:73:CF:C5:49:82:A2:C9:37:A1:F4:CF:1B:C5:C4:30:B6
X509v3 Authority Key Identifier:
keyid:7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:27:52:f6:6c:33:71:f8:94:ab:ed:3d:86:65:0d:6c:dc:
1d:94:ba:36:7a:4f:df:be:df:39:7f:00:ad:5e:20:08:00:0b:
a0:e6:89:10:92:d8:53:85:52:0c:ce:2f:66:bf:2d:69:71:1d:
39:57:e0:58:83:66:3c:48:1e:8f:e3:45:c2:ff:54:bb:2e:c5:
e2:4a:1f:73:0c:61:64:aa:78:a9:d7:d4:8d:45:3f:8f:07:73:
15:ef:96:8d:4c:8e:a0:8c:6f:34:2b:3a:e0:06:65:e5:46:93:
ec:2c:ff:74:ac:b1:1a:74:bd:0b:d7:83:32:84:a7:aa:97:bc:
ae:a0:9f:45:be:b0:4c:25:50:63:8e:cf:8f:86:f1:e1:ae:21:
ef:95:d2:07:2a:d9:4f:cc:78:13:63:3e:d8:fa:af:d1:15:a5:
31:48:45:2b:d8:51:c4:34:c5:79:62:5e:01:c4:ae:93:df:e2:
7e:78:00:76:be:7e:6d:e9:73:dc:31:d9:0d:61:71:b4:00:9f:
9f:40:49:f9:79:ff:de:02:99:79:f2:59:54:2a:66:05:88:3f:
ff:dd:84:70:d8:e6:ca:ff:d1:7f:0e:13:0d:be:61:87:2f:f1:
56:e1:a4:27:b0:26:f4:b2:a9:3c:b9:15:5d:30:51:2a:48:f1:
24:c5:f9:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWOBL0ZGc9O0+hbb2UNEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGNjYmExYzA1ZWY4NjYwYzRkODk4Nzk3NGFhZDAzOGJj
MmI0MzAwHhcNMjYwOTIyMDkwMTAyWhcNMjYwOTIzMDkwMTAyWjAzMTEwLwYDVQQD
EyhkZDJlOWRjZjczY2ZjNTQ5ODJhMmM5MzdhMWY0Y2YxYmM1YzQzMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMVHUfAn78LUmn/MVwhyQTm+/XQ2
yaQ1cUJ9XTDHz26w5QhAFGhNL1ZtC6cOahu0bC8xuM8VvEChfQoEdcnGPjcwMc6E
GM37ydiFjVY5+VPzlJQh+hwM1KPVNymUTFs3gFUCYSicOXs/svEmpet90nIPXH4r
9dew+dBF0pbDbrOGf+NKDnCG9oYo9663mjcyonwldJe689AjnmC2wXIYuYrHTTEv
qoSohd2nx9ujOnUdsHd/es99a3f543N0bx7+OZnGy7ijuDVWOsUv3s2qN8gmANpk
Lc+lmoOzUmz2N+f1EJNQsOd1vHfUHhyv+EFrOgECVJ8I+BhED05GH1lVjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0unc9zz8VJgqLJN6H0zxvFxDC2MB8GA1UdIwQY
MBaAFHxMy6HAXvhmDE2Jh5dKrQOLwrQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzIt
YTUzNzcyYjAxY2IyLzEvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzItYTUzNzcyYjAxY2Iy
LzEvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKQnUvZs
M3H4lKvtPYZlDWzcHZS6NnpP377fOX8ArV4gCAALoOaJEJLYU4VSDM4vZr8taXEd
OVfgWINmPEgej+NFwv9Uuy7F4kofcwxhZKp4qdfUjUU/jwdzFe+WjUyOoIxvNCs6
4AZl5UaT7Cz/dKyxGnS9C9eDMoSnqpe8rqCfRb6wTCVQY47Pj4bx4a4h75XSByrZ
T8x4E2M+2Pqv0RWlMUhFK9hRxDTFeWJeAcSuk9/ifngAdr5+belz3DHZDWFxtACf
n0BJ+Xn/3gKZefJZVCpmBYg//92EcNjmyv/Rfw4TDb5hhy/xVuGkJ7Am9LKpPLkV
XTBRKkjxJMX53A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:26 2026 by rpki-client